We have a huge network connecting remote hospitals through microwave links which are terminated in 3560 L3 Switch. The network is using RIP V2 for routing data. Attached is the network diagram.
1. Site-1 is the administration office which receives the DHCP pool and internet from the HO.
2. The hospitals use these microwave links to share data like CT scans etc with each other.
Issue: We want only Site-1 should be able to access the HO. The other sites should not access HO since there can be a security issue but they should be able to share data with other sites.
Someone proposed installing a firewall at the HO, Will that help? What configuration can be done on the existing switches to eliminate this?